b7E 


$SNs are used bv l l only for electronic matching of access records in the various FBI 
systems that currently still use the SXN as Use primary identifier Moving forward, it is 
expected due. wherever possible, ruber less sensitive attribates, such us the FBI unique 

\ 'v >, 'V V ' ^ 

| | wdl | | and will 

assume the physical security constraints inherent to that environ mom, including li miting 
access to atuhorl/cd individuals. AH access to and activities conducted within th e ] 1 
system, by users and administrators are logged and auditable. In addition, □ 
provsde rite Bureau with audit and reporting capabilities mat rciiect who itas access to 
what systems and how that access was granted. 

2. Docs the system/prqieet collect, maintain, or disseminate any information about 
individuals (he., a human being or natural person, regardless of nationality)? 

|.NO 

.X Yids pf yes, please continued 

3. Please indicate if arty of the following eharae tori sties apply to tire information in rite 
system about individuals: Bear in mind that log-on Information may identity or be 
linkable to art individual. 

X fite information directly identifies sped lie mow ideals 

.X. I be information is intended to be used, in conjunction with other data elements, 

to indirectly identity speeds: individuals. 

.X.The information cart be used to distinguish or trace an mow shad s identity (he., it 

is Linked or linkable to specific Individuals). 

If you marked any of the above:, proceed At Question 4, 

None of the above. If none of the above, describe why the information does not 
identify snet.dk individuals either directly or indirectly. 

4. Does the system/prqfoci pertain only to government employees, contractors, or 
consultants? 

.NO .X.YkS 


5, Is information about United States oilmens or lew why admitted permanent resident 
aliens retrieved from the system/profeci by name or other personal identifier? 

.NO. |lf on, skip to question 7.1 
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X YES, Ilf yes, proceed to the mxt yaestiomj 

The information about individuals contained within I I will pertain only to FBI 

personnel (Including contracto rs and tass wee eBo\sA' > ■ msoss wm', about non-Hli 
personnel will be contained in □ 

6. Does the system/project collect any information directly from the person who is the 
subject of the information? 

X NO flf on,- proceed to question 7-j 

_YES 

a. Does the system/project support criminal, CT, or FCI investigations or 
assessments? 

.NO 

YES f If yes. proceed to question ?,} 

b. Are subjects of information from whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or via a 
separate notice}'? 

NO |'I W program u Hi need to work *v tth IX I l to develop/implement 
the necessary ibrm(s)>| 

YES Identify any forms, paper or electronic, used to repocst such 
ntfornration front the Information subject; 

7. Am Social Security Numbers (SSN$) collected, maintained or disseminated from the 
systetn/projeet? Full SS.%. Should only be used as identifiers in limited instances, 

Nf 5 X YES If yes, check a II that apply 


.SSNs are necessary to eslablishYonfirm the Identity of subjects, victims, 

witnesses or sources m this law enforcement or intelligence activity. 


X SSNs ttc necessary to Identify I BI personnel in this Internal administrative 
X SSNaarc w n e of easons I>aser.tha 
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WTrile l ~1 itself vviH use the: Unique Employee Identifier (UFIIIU in? personnel 
identification pnrno.ws. SSN is she common sgrihate that nail be used to Link 
identities to accounts m other legacy systems that have not vet Imple mented the 
DFID in place of the SS N. SSNs will not be aecesstoic to env | [ oui user. 
SSNs are used by ) | umy tor electronic matching of access records in the 
various FBI systems that currently still tote the SSN ns the primary identifier by 
a ts t ho ri ned ad m i n i si rat o rs. 


X The .g stem-pro; cm provides speech protection to SSNs qe.g., SSNs are 
encrypted, hidden iron- all users via a look-up mod. or only available to certain 
users). Besedina 

SSNs. Explains 

X.No. 

.Yes. PdbroaUion systems operated by contractors tor the FBI may be 

considered privacy Act systems of records The Federal Acquisition Regulation 
contains standasd contract clauses that must he included in the event the system 
collects, maintains or disscmmat.es PI I and additional requirements may be 
imposed as a matter of Department of lastico policy. Consultations with the 
Oflicc oi the General C'otmse! ussy be required If a contractor Is operation' the 
system tor the FBI. 

9. Idas the system undergone Certiiieation & Accreditation A SPA; by the FBI 
Security Division t Seel .Us' 

x v n v w \ A v s „ s s ' m. e 

completion date: 


X_ \ S N W V_ v N \ ^ _ 

Ssj |is dev eloped within the | | 

I I bu s bad Sect) scans as pan of thc | | i A A process Thelas t b7E 

iC&A lor | [ was August DO. fd 10. It Is rated at the nam e levels o t | | 

I litgla Corb'idermal tty r Pugh integrity, and High Availaiautv, | [ mss last 
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Provide date af fast CX.A eertifkaHtm/re-eerkfleatkm: 

CanfldemkdOy:_Lew.Moderate X Digit.Undefined 

Integrity: s ' x - s A i ' s v ' \\ 

Avadabditso Low Moderate X High UmfclUied 


10. Does the system conduct data mining as defined in Section 804 of the 

Impiemerniug Reetunmendailons mdhe 9/11 Commission Act of 2007, lot.. I Hb 


YDS If yes, phase describe the data mining function: 


| |vv?i'- ultimately rcoDeel \ eta-rentA a H8MA system, and thus a 

that One d is nosdlde | ( nO ho dec'mated a, bo a HS\1 a omot:. 


II. EXISTING SYSTEMS / PROJECTS 

Tha i H Caret •onalhy - a | j andersyent erneyprl.se deployment on January 14, 20b 
2. Has the semen project undergone any significant changes sutoe A pdf 17. 20(90 


changes that apply , and pres ide Oriel'explanation for each osarked change): 
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A cbangc iron: inibrmadon m a format drat Is anonymous or non- 
idendleible. m a hams! that is Identifiable m particular individuals. 

A new use of an II vystenvprpiecA including application oi a new 
technology, than changes bow mtormabon .in identifiable hum is managed. 
Ida example, a change dtai would cream a more ream environment and/or 
avenue for exposure of dale Uni; previously del no! exisi.) 

A. change ihai resells in information in Identifiable Id no being 
merged, eewrau/ed, or matched with oilier daiabascs. 

A new method of authenticating ihn nse of and access to 
information in idemi liable lonn by members oibhe public. 

A •wsiemadc bicorportgioo of databases of miormmlon m 
identl foible farm purchased or obtained Iron:, commercial or public sources. 

A new interagency use or shared agency foncuoa dm results In 
new uses or exchanges of Information m IderfoOable hem. 



A change that results in new hems of mformailon m identifiable 
term bmng added lam die sY.n.wn.foro;eci 

Changes do not involve a change m the type or records maintained,, 
the individuals on whom records are maintained, or the mw or 
dissemination oi'information from the system/raofoct. 

.X Other I Primely brief explanation j: < images hose been made as 

part of | | bnt they do sm change the eventII assessment 

that this is part of Internal government operations. 
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OGC/PULU (Rev. i>4/0?/205 i) 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM / .PROJECT; Paiankr ('(.:} Unclassified 
BIKR FBI Unique Asset ID?_APP-OOooiMO 


! FBI QGCVFCLIJ PO P 
Na.me:| 


SYST EM-PROJECT FOC 
Name: | | 

Program Office: inteshseitce Products 
Unk (iPU) 

D.i v i sion: In fo m? atkm Tec tin o I o gy 
M a nag emeoi Division 

~l 

Room Number: CX. -4 


Room Number: JEti Rrn 7350 


FBI DIVISION INTERMEDIATE APPROVALS 



fi:eem;\ Mmsae-a io: vibes orpins ik 
executive as Division determines! 

Do -s on Oo<\\ C\ u\: 




Program Division: 
information Technology 
Management Division 

emnaiurel ] 

"a gnu me 
Dale signs; 
Namesf 


Dak: stoned: A/v/U*; < 

Namc:| f 

J- U^Lff/ZoL 

Title: Unit Chief 

1 S i n 

i tv* V P ' wo 

Signature: 

S,g0.ttOK 



Date signed: 

Date signed: 



Name; 
i st'e 



v okss eketrmtk song to F.BI OCOPO 
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HMD PCM A redacts* 


\ V. i V ^ v. ^ s, 

System doee sjot collect mai-msbo or disseminate PM. 

' ’ " V S V '. \ ■> V S s 

' C SSS < v v < ^ s. S s> ^ 

.System Mas bees'! previously assessed -under an evaluation similar a 

\s ' ' 'S s ' s s s s s ' s N 


.FB.LDataW 


MmH 1 Hi HMD RIR'X rev MHK' 
;>itp:Ahon!e:-DO/OCjC/!..';B/FCLl 


b X Yes ••See sm 
M I., ibmies% 2 0 Li bray 


iaied torn 


statement 


HM1M\ 


RMD 
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THE SYSTEM / PROJE 


!. Provide e general description of the system or project Chat .includes: (a) name of 
the sysfem/projeet, including associated acronyms; (b) structure of the 
! system/project, rn.do.ding interconnections with other projects or systems; (e) 

! purpose of the system/prejeet; (4) stature of the information In the system/project 
and how it will he used; (e) who will have access to the information in the 
system/projeet; (!) and the manner of transmission to all users,. 


to application for the FBI foes 
nee analysis into one integrate 
eels of formats, including mes 
itured and unstructured data, 
l to orguoi/e hiscihgenee infos 


I b eross the FBI. It will also hefo users extract rcieva 

information that might not otherwise be apparent to the user. For example, the visit 

s , s ' ws *. o V ' „ \ ' , ' , m v ' ; 

'O' "■ ' w ' ' p\s\o.m , v\oulo'' > cos'' Fo; to x . t~,e > v 

characterised for future use. Tagging of the data allows users to create structured 

' a , \ •> l l\ . u.v' . V 

on Sstmctured data for making connections 
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\ U >'(. m- < .U u" X S „v\ W V 

HI >Va"> vi'VO' Cut dot s '-' Umg S\\H,K'S Ms U.Vl : 

amir products in the Unclassified environment. The 


the unclassified love 


rpload a certain amount «of information, they 
: (Counsel recarding whether new privacy 


Polandr wiH cwvH ct addumm 
node available in the future. 


nasys.i 


Information almat 
omnsnalhyw 


2 , Dues the system/projeei coll 
I individuals (Lew a human feeinj 
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X YES [If yes, pleas* continued 


3. Fleas* indicate If any of the following characteristics apply to the information in 
the system alwnt individuals: Bear in mind that log-on information may identify or 
fee linkable to an individual 

(Cheek ail that apply.) 

\ s' S ' ^ ’ sS v\v. S 's' V 3s, 

\ s \ *' s' ' s s ' s v s' s's 'V sO,' sTs. s' " 1 f > <0-0'. 

ok® o... ;N K'Oi'of" 'y t ,3 s';,I '■e>;<s •- 

\ s' " s' V s s 't ! '<ssS N 0 \v ,V' s ! S s' s s a' S >. 

is linked or linkable to specific individuals). 

If yon marked any of the above, proceed to Question 4. 

None el the above, if none of the above., describe vvhy the information does not. 
identity specific individuals either directly or indirectly. 

4. Does the system/project pertain only to government employees, contractors, or 
eonsnftants? 

..X.NO .YES 

5. Is information about United States eifeens or lawfully admitted permanent 
resident aliens retrieved from the systcm/projcct by name or other personal 
kle.oti.fler? 

.NO. [If no, skip to question 7,| 

.X_ YES. [If yes, proceed to the next question.] 

Y Docs the system/projeet collect any information directly front the person who Is 
the subject of the information? 

X.NO flf no, proceed to question 

.YES 

•; iX'e o no xy stem p:vu\n snppm' o' moral 0 1, o' K'i sme'.no'moo*or 
assessments) 

.NO 
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_\ hs (If yes, proceed to question 1 <\ 

b. Arc subjects of information from whom the information Is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection Conn or via a 
separate noiree*' 

NO j'The program will need to work with PCI 0 to develop/impiemeto 
the necessary form(s).} 

YES identify any forms, paper or electronic, used to request such 
information from the information subject: 

A Are Social Security Numbers (SSNs) collected, maintained or disseminated front 
the s> stem project? Foil SSNs should onh he nsed as identifiers in limited instances. 

NO X YES if yes, cheek ail that apply: 


X SSNs arc necessary to estabhsh-confirm the identity of subjects, victims, 
witnesses or sources In this law enforcement or intelligence activity. 

SSNs arc necessary to identify FBI personnel in this interna! administrative 

system. 

vSV >e .mpommt ho Hher reasons Describe: 

.The system/project provides special protection to SSNs (e.g., SSNs ate 

encrypted, hidden from all users via a look-up table, or only available to certain 
osersi. Describe: 

It is nm feasible for the system project to pros ale special pmteetmo to 
SSNs. Explain: 

8 . Is the system operated by a contractor? 
jfx No 


3 on >*o o a " s«uo.v vied to cq Nectoss r too 1 Bl nun X' 
considered Privacy Act Systems of records. The federal Acquisition Regulation! 
contains standard contract clauses that must be included In the event the system, 
collects, maintains or disseminates FI I and additional requirements may he 
imposed as a matter of Department of Justice policy Consultations with the 
Office of the General Counsel mas be required if a contractor is operating the 
svetem for the FBI. 


TNC:LASSiFlED//FOI r O 
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SI Has the system undergone Certification & Accreditation i€&A) by the FIJI 
Security Division (Seed)? 

X_ NO If no, Indicate reason; if C&A is pending, provide anticipated 
completion date: Fending with an anticipated completion date of 
i: o' ;oo 

V t: S If yes, please indicate the following, if known: 

Provide dale of last C'&A eertifieatlomYe-eeriifteation: 

Confidentiality:_Low_Moderate.High.Undefined 

integrity: .Low Moderate High Undefined 

Availability: tow Moderate High Undefined 

Not applicable - this system is only paper-based. 

UK Does the system conduct data mining as defined in Section SO4 of the 

Implementing Recommendations of the 9/11 Commission Act of 20117. P.L, 
110-53 (codified at 42 USC 2000ee-3)? 

NO 


\ | Y ES If yes, please describe the data mining function: 

O^cc a cot turn amour.* o arorm.nmn :s ~rpo .ev mm ' n<m ' d t or s ..eoevbb'o 
through Pc I an hr OJg it will allow FBi special agents, munigencc analysts. and 
«OT5fX\u smF'io perform . \ar.ef\ o; ms.'Hsoy to , t, op , ^ \0 ^.uv -o me - 

v .'. o w w ^ v s _ N cl I 

j | All data 

mining activity u tit be reported lit accordance with appfieaNc policies, 

! 1. Is this a national security system (as determined by the Seel))? 

X NO _YES 

12, States of System/ Project; 

\ : ho ',c: 0 \ ponoci in development (If y tm cheeked this block, 

STOP, The ETA is now complete and after division approvals) should he 
submitted to FBI OCOPf'Lt for final FBI approval and determination si 
PI A and/or other actions arc required,] 


UNC'LAESIIdLfl//FOUO 
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II. EXISTING SYSTEMS / PROJECTS 

1. When was the system/p?ojeei developed? 

2. Has the systern/proiect undergone any significant changes since April 17, 2003? 

NO | If no, proceed to next question (f 1.3).! 


YES if yes, indicate winch of the following changes were involved (mark all 
changes that apply, and provide brief explanation for each marked change): 

A conversion (font paper-based records to an electronic system., 

\ o' e ' n ' vX ' o e > x , f x < xx" '\\ s' >'o 
Identifiable to a formal that is identifiable to particular individuals, 

A new use of an IT system/proiecL including application of a new 
technology, that changes how Adi aeration in identifiable form is managed. 
(her example, a change that, would, create a more open environment and/or 

v s -.X s \ 'X \? v v\ 

A change that results In information in Identifiable form being 

vs W v, v-V O X vX " W'' 

A rtew method of authenticating the use of and access to 
in formation in Identifiable form by members of the public. 

X X ' ' X ' vOv ' > Oi X Ov ! 0 'X ot 

vO' v ' v v v\ e wx‘ . - no ,o v o ,x»" v - v»w 

X V ' 'V l V V V. V V V ( ' d „ V! 

new ases or exchanges of information 1st idem! liable form, 

v v \ 

identifiable form. 

V * V\ 'v V' O' 'v O V vO “ ' V 

‘ X V V V V V V < O s " ' ' 

Changes do not involve a change in the type of records maintained, 

V s N X v. v ' v v O s - 

w " o' m ' o f o' x' "ncx v Ov 
Other provide brief explanation];: 
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a. Provide dole/tbie of the FI.4; 

N w vv. s XV. < ^SS'vv v ' \ 

|.NO .YES 

[The FT.4 is now complete mid after division approvals} should he sobmiffed to 
FBI OGC/PCLIi for final FBI approval arid determinsdioo if FI A and/or other 
actions are repoired.j 
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FBI PRIVACY THRESHOLD ANALYSIS (FT.4) 


\wtr 01 \hum prop rt 

N\ v 'V > N v \v«. *p 



MMITMPROAR UAH 


N S mm:|- 1 


i tout am OlSce NSB Operaooa\ 


! Seppop- 


! Phonef 1 


\ - v * 


FBI OGC/ FCLU FOC 
Name: AGC| 

pi« K |— 1 —r 

Room Number: CR km 


FBI irn AloN IvmiM* m \TE approv \|.s 



exeomive an plyRiyg dGvMRMM_ 

Doomm P 

ovacy ORlcer 





p-mmum $ 

Irgbrasarirm Teemmiogv 
Eemoeeemg Divis km 
s mYm s 

Signature: 1 1 

S measure: 


: Ram named: RA f ? • v 

Dale >smm 

A Tj'rM' r 1 


! Nume:| j 

Name:! 

' ■ 1 

i Tide: Program Manage; 

i Tirse: IT Security Pom ram Manor 

HURRIMRSm 

; Mammae 

Si amours; 




Pass signed: 

Dare siaoa 

d: 



Name: 

Nssme: 




Tula: 

Tide: 
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h INFORMATION ABOUT THE SYSTEM / PROJECT 

L Provide a geoeral dtescriptmu of the system or project that hurkuks: (a) saw of 
the syAeot/projeet, mehuliug associated acronyms; (h) sfracture of the 
sysiewBprojeef, ioefudleg IsfereomssOlows with other projects nr systems; (cl 
purpose of the sysf m/pro jeer, (d) stature of the iMarsuMioo iu tbe systero/prpjeet 
ami .bow it mil Be used; (e) who will have access to Che iu.Curmaf.kw> m the 
system/projeei; (f) aud Use mawuer of tra.osw.dsslow to ail users. 
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CWrO UQ? Palantlr h as several i 
control I 


r pro vut mg ace 


~U= 


"Wfo' b , ' 


L 


\ II//FOUO) Second, Paianiir users have the ability to set discretionary access contro 
Faiamir pro-date tx they create in their Palantlr defined workspace," to mclede which 
and groups are amhorwed to access their work. Users also have the ability to set 


|]attd tnert 


act wt.h not oe 


■re a. workspace or 


information In a Palantlr product with arts one who does rust have the same access 
permissions. Additionally. Palamir business managers are earrently creating business 
rules that are in line wait i-B.i access control and data sharing policies for user import, 
creation and sharing of Palantir products. The rates will dictate what users can share with 
others. Users will he trained regarding these business rules in the required Palantir 
training coarse. 

(U//FOUO) Finally, information subject to restrictions (e.g. grand jury data) will have the 
satne amthorfoailon and petrnlssion options as described above except permissions and 
authorisations wit! ha controlled by Paianiir administrators in coordination, with case 
agents, 

2. Does the ss swan project, collect, maintain, or disseminate arty information about 
individuals (he.. a human being or natural person, regardless of .nationality)? 


X Y13 S (If y es, pi eas e e o n tin m \) 

3. Please indicate if any of the lot I owing o ha racism 

linkable to an individual. 

(Cheek ah that apply.) 


omation may identil v or be 


X The Iniormation Is i 
to indirectly identic 


.ttfoo with other data 
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If ynn marked mv of the above, proceed to Question 4. 


COOCO.ltSOt.S'" 

X.NO YES 

aliens retnesed Norn the syslenv project by name or other personal identifier? 

.NO. f If no, skip to question 7.) 

.X.YES. {If yes. proceed to ibe oert qosMfood 

6. Does mo sysmm/proiect col Del any information directly iron- the person who is the 

X NO (If no, proceed to question 7.) 

.YES 

NO 

YES {If yes, proceed to question 7,| 

separate notice)? 

.NO {The program will need to work with PCLU to devdop/fospkuoeot 

the necessary fbrmfohj 

.YES Identify any forms, paper or electronic, used to request sock 

information from the information subject:; 

epic.org EPIC-14-06-04-FBI-FOIA-20150616-7th-Production 


EPIC-2113 









X YES If yes, cheek all that apply: 


witnesses or sources in this law enforcement. or intelligence activity 


SSNs arc necessary to identify E BI personnel in this internal administrative 

system. 

SSNs ere important for other reasons Describe: 

The systetn/prosect presides special protection to SSNs (e,g., SSNs arc 
encrypted, hidden coni ail users via a look-op table, or only available to certain 
users). Describe;: 

h Is not feasible for the system-project to pro vide special protection to 
SSXM Explain: 

X.No. 

Yes. Information systems operated by contractors tor the FBI mas be 
considered Privacy Act systems of records. The .Federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system 
collects, nos mums or disseminates Pi! and additional requirements may he 
imposed as a matter of Department of Justice policy. Consultations with tire 
Office of the Genera; Counsel may be required if a contractor Is operating the 
system .for the FBI, 

Idas the system undergone Certification A Acered.ust.ton (C&A) by the FBI 
Security D! vision (SeeDC 

.NO If no, indicate reason; II" €&A is pending, provide anticipated 

completion date: 

.X Y ES If yes, please indicate the follow log. If known: 

Provide date of last C&A cet tifleattoo./ re-eerttfle adon; 

Falautir Is part of the C& A Ibrf ]\vhkh was last certified In 

March. 2012, 


EPIC-14-06-04-FBI-FOIA-20150616-7th-Production 









Cosfsdettttaliiy I. ovv VI s.nf mste X IIleh_I ndeftned 

Integrity: _ Law X Melmfe High Uaddmed 

Availability; Raw X M oderate High Uadefiued 

__ \ i applicable - this system wonts paper-based. 

ft). Poos s ' s s o t ' - e OS do s ? ScetH S - O s . 

I Roubleu uiioiNO 1 ! u ' i O mmiss " \uo 20 b? N i M- 

\* nodYei at -G IAt JOvoccY» 

.NO 

_\_YES If yes, please describe the data analog fmr&mt 

K ' Ettii W&S \ Bt wxv'Y.eieivsY intolbooncc v \s s < 
perform, a variety of analyses to develop and und erstand entities 
and their relationships with one system. 1meridce.| I 

| All data raining activity will be reported In 
accordance with applicable policies, 

IL n , wo y $$%ii \ .,'oa' »' , s ^ ' 

.HO .X.YES 

12. Status of System/ Project: 

X 1 it N S.. non' Vv' A o' Cv t O' Je\ c'.o 00 to;'. ?. 

IL EXISTING SYSTEMS/ PROJECTS 
f t\ p - ' w 's' ay stotv, 'Os OC' O oo 

2. Has the system/projest undergone on significant changes since Aped \ X 2002? 

YES If yes. indicate which of the following changes were involved tynark all 
changes that apply, ami provide 'brief evpknatkm far each marked cha nge): 

org 
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A change iron' inhumation in a format shat is anonymous or non- 
identifiable to a forma! foot is idemifiabia So particular individuals, 

.. A new use ofan IT syslcm/pnecot. including application of a stow 

technology. that changes how irbbrmnuoo in identifiable term is managed. 
(For example. a. change that would create a more opes' environment and/or 
avenue for axposura of data that previously did not exist . ; 

A change that results its information in idensltlable form being 

A now method of authenticating the esc of and access to 
information in sdontifnsbla form by members ofthe public. 

A systematic incorporation of databases of in formation in 
foeroifoible form purchased or obtained bom eormncwial or public sources. 

A new Interagency use or shared agency auction that results in 
new uses or exchanges of information in uicnffoable form. 

A change that results in a new use or disclosure of information m 

A change that results in new Items of mfbrmatton m identifiable 
form being added into the systa.m/proiect. 

Changes do not involve a change m foe type of records maintained, 
the Individuals on whom records are maintained, nr the too or 
dissemination of information from the system, proieea 

Other | Provide .brief eagimmikm]: 

>es a PlA. for this syslem/project already exist? 

HO Yob 


Provide date/title of the P.I.A; 

.YEh 
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FBI Privacy Threshold Analysis (PTA) Cover Sheet (ogc/pclu(R ev. 1/17/07) 


NAME OF SYSTEM: Technical Revitalization Program 

FBI SYSTEM CONTACT PERSON 

Name: | | 

Program Office: Information Technology Operations Division (ITOD) 

Division: ITOD _ 

Phone: | | 

Room Number: j R940 

Date PTA submitted for approval: April 11.2007 

FBI DIVISION APPROVALS. A PIA (and/or PTA) should be prepared/approved by the cognizant program management in 
collaboration with • T, security, and end-user management arid OGC/PCLU. (PIAs/PTAs relating to electronic forms/questionnaires implicating 
the Paperwork Reduction Act should also be coordinated with the RMO Forms Desk.) It the subject of a PTA/PiA is under the program 
cognizance of an FBIHQDivision, prior to forwarding to OGC the PTA/PiA must also be referred to the FSIHQDivision for program review and 
approval, if required by the FBiHQ. Division. 



Program DivisiondTOD 

FBIHQ. DivisiondTQD 

Program Manager 

Signature: 

Signature: 

(or other appropriate 

Date signed: 4/11/07 

Date signed: 4/21/07 

executive as Division 

Name] j 

Name: Louis 1. Slazy 

determines) 

Title: Program Manager (Customer Support Unit 

Title-Assistant Director (ITOD) 

Division Privacy Officer 

Signature: 

Signature: 


Date signed: 

Date signed: 


Name:| j 

Name: 


Title: Deputy General Counsel 

Title: 


Upon Division approval, forward signed hard copy plus electronic copy to OGC/PCLU (JEH Room 7338). 


FINAL FBI APPROVAL: 


FBI Privacy and Civil Liberties Officer 

Signature: 



Date Signed: 

5/15/07 


Name: 

Patrick W. Kelley 


Title: 

Deputy General Counsel 


Upon final FBI 


approval, FBI OGC will distribute as follows: 

1 - Original signed copy to 190-HQ-C1321794 
Copies: 


1 - DOJ Privacy and Civil Liberties Office-Main Justice, Room 4259 
1 - FBI OCIO 

1 - FBI SecD (electronic copy via e-mail) 

2* - Program Division POC /Privacy Officer 
2*- FBIHQDivision POC /Privacy Officer 

(*please reproduce as needed for Program/Division file(s)) 


1 - OGC\PCLU intranet website 
1 - PCLU Library 
1-PCLU Tickler 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: Technical Revitalization Program 

For efficiency, a system owner or program manager can be aided in making the determination of whether a Privacy Impact Assessment (PIA) is 
required by conducting and following Privacy Threshold Analysis (PTA). 


A PTA contains basic questions about the nature of the system in addition to a basic system description. The questions are as follov 

A. General System Description: ' Tct l \ " : : x . ::-i if:;:!:; rcpiacer:icn; .. ' 


1. Type of information in the system: 

2. Purpose for collecting the information and how it will be used: N/A 

3. The system's structure (including components/subsystems): N/A 

4. Means of accessing the system and transmitting information to and from the system: N/A 

5. Who within FBI will have access to the information in the system and controls for ensuring that only authorized persons can 
access the information: N/A 

6. Who outside the FBI will have access to the information in the system and controls for ensuring that only authorized persons can 
access the information: N/A 

7. Has this system been certified and accredited by the FBI Security Divisions? _Yes _No N/A 

8 Is this system encompassed within an OMB-300? _Yes _No _Don'tKnow N/A 

(Ifyes, please attach copy of latest: one.) 


I. Was the system developed prior to April 17, 2003? 

_YES (If "yes," proceed to Question 1.) 

_x_ NO (If "no," proceed to Section II.) Although the Technical Revitalization Program is not a system, the timing of the replacement of IT 

equipment postdates April 17, 2003. 

1. Has the system undergone any significant changes since April 17,2003? 

_YES If "yes," please explain the nature of those changes: 


epic.org 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: Technical Revitalization Program 


(Continue to Question 2.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU)for review, approval, and 

forwarding to DOJ's Privacy and Civil Liberties Office. Unless you are otherwise advised, no PIA is required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, and 

forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

_YES If "yes,” is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," afull PIA is required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, 

approval, and forwardingto DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required. 
(FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if afull or short-form PIA is required.) 

II. For systems developed after April 17, 2003. 

1. What is the purpose of the system? (Answer in detail unless details already provided in A. 2 above): 

The Technical Revitalization Program is an orderly and planned replacement of the FBI's technical assets that are associated with its operating 

platforms. 

(Continue to Question 2.) 

2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_X_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, and 
forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

_YES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," afull PIA is required.. PTA is complete.) 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: Technical Revitalization Program 


_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, 

approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unless you are otherwise advised, no PIA is 
required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if a full or short-form PIA is required.) 


III. Full or Short-Form PIA 

1. Is the system a major information system (as listed on OGC's FBINET website)? 

_YES (If "yes," a full PIA is required. PTA is complete.) 

_NO (If "no," please continue to question 2.) 

2. Does the system involve routine information AND have limited use/access? 

The Technical Revitalization Program is not a system. 

_ YES A short-form PIA is required. (I.e,you need only answer Questions 1.1,1.2,2.1,3.1,4.1, 5.1 (if appropriate), 6.2,6.3, and 8.9 of 

the PIA template.) Please note that FBI and DO) reviewing officials reserve 
the right to require completion of afull PIA. (PTA is complete—forward 
with PIA.) 

_NO (If "no," a full PIA is required. PTA is complete.) 


July 24,2008: Name change annotation: 


From: 

Sent: 

To: 

Cc: 

Subject: 

Importance: 


I I (ITOD) (CON) 

Thursday, July 24, 20 08 3:16 PM 

I , ] (OGC) (FBI)-. --- 

1 | (TtOD) (FBI); | I dTOD) fFBl U | (ITOD)(FBI) 

Prevention of Information Technology Obsolescence (PITO) - OMB Exhibit 300 FY 10 Submission 
High 


b6 

b7C 


UNCLASSIFIEDNON-RECORD 

n 


Per our phone discussion, for your records the Technology Revitalization Program is currently known as Prevention 
of Information Technology Obsolescence (PITO) program. 
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FBI Privacy Threshold Analysis (PTA) Cover Sheet (ogc/pclu (Rev. 07/06/07) 


NAME OF SYSTEM: Evidence Collection and Management System (ECMS) 


FBI SYSTEM CONTACT PERSON 

FBI OGC/PCLU POC 

Name: SSa| | 

Name: 

1 1 

Program Office: Evidence Response Team Unit 

Division: Laboratory 

1_ 

Phone: 

_1 

Phone :| ' j 

Room Number: JEH 7338 

Room Number: 4310 

Date PTA submitted for approval: 08/16/2007 




FBI DIVISION APPROVALS. A PiA (and/or PTA) should be prepared/approved by the cognizant program .management in 
collaboration with IT, security, and end-user management and OGC/PCLU. (PIAs/PTAs relating to electronic forms/questionnaires implicating 
the Paperwork Reduction Act should also be coordinated with the RMD Forms Desk.,) If the subject of a PTA/PIA is under the program 

cognizance of an FBiHQ Division, prior to forwarding to OGC the PTA/PIA must also be referred to the F-3!HQ_ Division for program review and 
approval, if required by the FBiHQ. Division. 



Program Division: [insert division name} 

FBIHQ.Division: Laboratory 

Program Manager 

Signature: 

Signature:/s/ 

(or other appropriate 

Date signed: 

Date signed: 8/16/07 

executive as Division 

Name: 

Name:) " | 

determines) 

Title: 

Title: Supervisory Special Agent 

Division Privacy Officer 

Signature: 

Signature:/s/ 


Date signed: 

Date signed: 8/16/07 


Name: 

Name: John Joseph Behun 


Title: 

Title: Section Chief 


Upon [Division approval, forward signed hard copy plus electronic copy to OGC/PCLU (jLf i Room 7338). 

FINAL FBI APPROVAL: 


FBI Privacy and Civil Liberties Officer 

Signature:/s/ 



Date Signed: 8/22/07 



Name: 

David C. Larson 


Title: 

Acting Deputy General Counsel 


Upon final FBI approval, FBI OGC will distribute as follows 


1 - Signed original to 190-HQ r C1321794 


1 - DOJ Privacy and Civil Liberties Office-Main Justice, Room 4259 

2 - FBI OCIO / OIPP 

1 - FBI SecD (electronic copy via e-mail) 

2* - Program Division POC/Privacy Officer 
2*- FBIHQDivision POC /Privacy Officer 

(*please reproduce as needed for Program/Division file(s)) 


1 - OGC\PCLU intranet website 
1 - PCLU Library 
1-PCLU Tickler 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) (OGC/PCLU (Rev. 07/06/07) 

NAME OF SYSTEM: Evidence Collection and Management System (ECMS) 

For efficiency, a system owner or program manager can be aided in making the determination of whether a Privacy Impact Assessment 
(PIA) is required by conducting and following Privacy Threshold Analysis (PTA). 

Whether or not a PIA is required, the system owner/program manager should consult with the FBI Records Management Division (RMD) to 
identify and resolve any records issues relating to information in the system. 

A PTA contains basic questions about the nature of the system in addition to a basic system description. The questions are as follows: 

A. General System Description: Please briefly describe: 

1. Type of information in the system (If the system is solely related to internal government operations 
please provide a brief explanation of the quantity and type of employee/contractor information:): 


2. Purpose for collecting the information and how it will be used: 


3. The system’s structure (including components/subsystems): 


4. Means of accessing the system and transmitting information to and from the system: 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: Evidence Collection and Management System (ECMS) 


(OGC/PCLU (Rev. 07/06/07) 


5. Who within FBI will have access to the information in the system and controls for ensuring that only authorized persons 
access the in formation: 

I I b7E 


6. Who outside the FBI will have access to the information in the system and controls for ensuring that only authorized persons 
access the information: 

No persons outside the FBI will have access to the information. 

7. Has this system been certified and accredited by the FBI Security Divisions? 

NO - The FBI Security Division (SECD) has authorized the ERT Unit to build and beta test. Once the system is proven 
to be secure, SECD will certify and accredit the system. 

8 Is this system encompassed within an OMB-300? _Yes X No _Don't Know 

(If yes, please attach copy of latest one.) 


Was the system developed prior to April 17, 2003? 

_YES (If "yes," proceed to Question 1.) 

X NO (If "no," proceed to Section II.) 

1. Has the system undergone any significant changes since April 17,2003? 

_YES If "yes," please explain the nature of those changes: 

(Continue to Question 2.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

_YES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," afull PIA is required.. PTA is complete.) 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: Evidence Collection and Management System (ECMS) 


(OGC/PCLU (Rev. 07/06/07) 


_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for 

review, approval, and forwardingto DOJ's Privacy and Civil Liberties Office. Unless you are otherwise advised, 
no PIAis required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if a full or short-form PIA is required.) 


II. For systems developed after April 17, 2003. 

1. What is the purpose of the system? (Answer in detail unless details already provided in A. 2 above): 

SEE A.2 above. 

(Continue to Question 2.) 

2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 

X Y ES (If "yes," please proceed to Question 3.) 

_ NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, 

approval, and forwardingto DOJ’s Privacy and Civil Liberties Office. Unless you are otherwise advised, no PIAis required.) 


3. Is the system solely related to internal government operations? 


_X_ YES. See A.1 and A.2 above. 


b7E 


If "yes,” is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," afull PIAis required.. PTA is complete.) 

X No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties 
Unit (PCLU) for review, approval, and forwardingto DOJ's Privacy and Civil Liberties Office. Unlessyou are 
otherwise advised, no PIA is required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if afull or short-form PIA is required.) 


III. Full or Short-Form PIA 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: Evidence Collection and Management System (ECMS) 


(OGC/PCLU (Rev. 07/06/07) 


1. Is the system a major information system (as listed on OGC's FBINET website)? 

_YES (If "yes," afull PIA is required. PTA is complete.) 

_NO (If "no," please continue to question 2.) 

2. Does the system involve routine information AND have limited use/access? 

_YES A short-form PIA is required. (l.e.,you need only answer Questions 1.1,1.2,2.1,3.1,4.1,5.1 (if appropriate), 6.2,6.3, 

and 8.9 of the PIA template.) Please note that FBI 
and DOJ reviewing officials reserve the right to 
require completion of afull PIA. (PTA is 
complete—forward with PIA.) 

_NO (If "no," a full PIA is required. PTA is complete.) 
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FBI FT A; 


FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS:: Olds soNlep NR be orsvdgteteX bf the FBI 
iNNNNPCLO AbtewJoe: FTa vNsstrNOon, T!s« PIN, deNOr :sFos.ttt! skip to the ttesA page estsl eoMkttsed; 

PI A Is required by the l:.-(:K}veri;nie;U Act, 

PI A A to be cootpicicd to; a matte? of FBDDO.I dlscredo:;;. 

Is PI A to bo pobbshed on FBLOOV {alter any RAID FOIA redactions}? .¥es. .No; iodxtne reason*; 


X PI A A nor repaired to? the following reason(sV 

Ryiren? does not collect mamRun, or disseminate PIP 
X System is erendhuPooN (in existence bsdo:c 4/rA'20b3; no later changes police sigoiileam on vacs 

. Information In the system relates to Internal government operations. 

System has been previously assessed coder so evxk-ailon similar to a PI A, 

.No slgnklcarb pro-acy issues (or privacy Issues are unchanged). 

.Other tdesenbe): 


Applicable SOHKuc FBI-00.2 shacked up by DOJ-003) 

Nolily FBI RXID/RIDS pcs NROG 100BA? NdA-previously addressixl. 
SORN/SORN rev Lion: i) required.'? X No Yes {led Race revisions needed;: 


Ovperehovowbxdd Privacy Act se>s PI sxuemenO' lor re Bleu forms? Nr A, 


RECORDS, The program should consul; with RMD to idemRYoeiotve any Ik-demi recordsielecoonte records Issues. 
Ine system may coniam Federal records whether or nor h contains Privacy Act requests and. so any event o records 
schedule approved by the National Archives and Records Athmmatatwon ;s necessary RMD car; provide advice ox 
Fes as wed as os; eompbatxe wnh requirements for Flectro;;;c Recordkeeping sicsiiOcrsilon and any necessary updates, 
Other: . 


David C. 1.arson, Deputy Oenersd Ooumei 

i Fxncnarc: , 

) «../••'/ N'O .f\ . i 

r Bt Brtvncy pod Civil. iNeriies Officer 

j Date Signed;'. 

?f£y/&y \ 
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L INFORMATION ABOUT T.HE SYSTEM / PROJECT 

I . Provide a genera! description of the system or project that mdad.es; «a»c of the system/project 
mduding associated acronyms; structure of the systetu/project, purpose; nature of the infomatkm 
io the system ami how it will he used; who will have access to the information m the system and tins 
itmnmT of transits *< ,! siuh <. > ^ „ \ 1 i ^ ' \ v i 
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PDTY 






idetrkfbrbie form. re... N snfeemttbott linked to or linkable to rpecdk ntdtviduak t'whkh A the defiosuou 
of personally Identifiable kkoToalion fPPYf? 


NO- 111'on, STOP. Too PTa N non oornpUie ask oner sdvBloo ap|norv:N(k should be 
ooknkBed nr FBI OGCUAlLtl kr keel FBI epproYnl. Boless roe on- otkrrmse advbek on 
IB A B rnnolrotFl 



4. N kfbrrnation about United Stater okeene or lawfully admitted pamsatsent. resident aliens retrieved 
front the systenkpnAses by name or other persona! identifier? 
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information provided has deer; at the individual's own omiadve. 


.YES. Identify my forms, paper or el«efrmm\ used fo request saieh 

lofprpmtoo from the mfyrm&ihm subject: 

Haw the system unde mono Cernrkavmr & Acctedihakm K'kA.: by the FBI bcoaruy Dhdskin <SecD;- 
NO. If oo„ kulkate reason; If €<&A k peodmg. pres ide sMldpated cepspk'tkm dote; 

\ ' '' O’* te>. d rts ,' Um <. A. \ v.ei' fh m <.p < e \u Pto..st' a 



..................... F o b.. If yes, please provide the dale 

aod mm.z or title pf t.hr 0MB sofotdsdoo: 
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fill FT A 



I i\wiv ( KUii v\ i ^ 



rmos.rmex ao not sovosve a eoaoge os ok? rvpe as records .masmon'esl me rttd.tvOa.5Ks 
on aleon records are nrasmraned.. or toe ode or dOsenmnmon of miVorAdton front 
me aystcno pro;set. 


Other. | Provide brief -fc.sphitaHo.rs j: 

3. Does a PtA lor xhis aystemrj-s-piect already o'sist? X NO. 

if rise FT A X tree.- eornpieie and .after dhoosoe approvals) sdsoetd to; 
Or Xorsf t' Bl approve; sort deOditrOrs tests if PI A sneJArr other aetk; 


EPIC-14-06-04-FBI-FOlX^20150616-7th-Production 
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' "O >x m \> \ o K* MMi > \N I" \ 


NAME OF SYSTEM / PROJECtJT 


SVSTSM/PKOJECT POC 




FBI CK 1 C/PCL 0 POC 

^4 


■s NanDsr Bid* 1, Lid 


rm do ouo iNn'KMi m sff mipoo si v 


! kviyra-n Manage Far nppnvpOca 


Pfvvxvan D;vOap:. IPOD ! POnkaO 

SDn-ianra- | | 

i's.ts ■:• cafe -a, ;;a. p ; v 5 ! r . .• 1 


i ka.-:?v:| |' 

— 1 1 

i Tlk: Dah ChkPlyearn Owner 

> S:?: /y i! j\ O ; v : -;U o-v v'D v,\< o<,7 p\C<y <(./ 

FBi'HO Division: j Orsnunre: 

j Da;a signed: 
i kannr: 
j Id; hr 

Signature: 

Dare signed: 

Nsnsn; 
lids: 


AlOf ah OOsDn a;>:gr^;;h fer^rtf i.i%na4 hard copy pOs rfaSr<*»fc sop$ n> FUi OOC/POLdd 007 050, 

Oka; rH; PnvScy and Llvd Libc-mc* OPkndv dnOxvnvydnnv wndknv;::, andDr On;d sapiava; Ol he aanoOad an ;he 0 


lyxn; iPad PO approval Lhd IkPlld/Ll.i vnai dP:Oru:v as ildnvan 
i •■ ligand arkirad :n Ok m07Q.€ i D j794 ilka m Old ;: B2(?4 via 05.020) 


; - DOJ Okdpa O' Privacy and 0-0 Ldxvnn< (via a-cadi ;a 

{kchcrdlo. via hand ddivary p> ! Ph j ID;v; Aw. V\V. Sada 111 20530) 

2 • FBI 0-00 OiPP 007 1570. ;;U; : j 1 _ 

1 • FBI SadlAU (nkcoxna cyrsyr vk aapad Or Ul| I 

,V 'V I I 

2 - i0.av-a:a TlvaOoa POC rprsvacv Oukcr 
2 - FBI HQ Dcliaa POC 'Privacy COkar 


:: v Q>OC-OO..U ij 
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H\*i. HO \H’Hm xf or si '< <>V>mt>\N: 


j^gcrH: X X<; YO>. SORNfXORX rcvX:k«\ rsicirH; X.No .Voi 

OO'.iN RXiQXODS per MXXf NOa.N .No ..X Y« 


OOK-.f: Xyster;; e; gr; 


DixOd C, L-Sosoo., Dire;:;;)- OenerO Coiccsf 
fiX Privacy :\;;<i C;vf; LOerHs. OfOxo 


Ygxxore 
Dote Sigre 
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b7E 


NO. ill 00, STOP, Tbs: FT A la ttotV i 
submitted m FBI OXiCYFCLIJ Or final FM approval, Oakes ysm are < 

FI A 0 recgriredd 

X YES. [If yes, please continued 

3. Does the system/project. pertain only to government employees, contractor^ or consultants? 


X NO. 


V 1:0 


4. \ * V ^ V. V S 

s v . V S v ' V x S >. 


X YES, Ematl yjobd address list, provides name, eoto.il address, uor 
and phone number nf uva.daPie} 


Are Soda! Security Numbers (SENS; collected, mai.ntd.ued or disseminated from, the systemAmdeef? 
X NO, YES If yes, cheek all dun apply: 


SSNs are necessary to estahh-btYoofirm the Identity of -mb Nets. victims. witnesses 
enEncernem or intelligence activity. 








vail able to certain users;, licscd.be: 


.It. Is not feasible for the system/prrnect to provide special protection to SSNs, 

Espkmt 

s the syntem/proieet. collect any information dreeds dean the person who 0 the subject of d 


YES, 


.YES. Iff yes, proceed to 

NO. 
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b7E 


NO. [The program will nerd to work with BCLE to develop/Implement the 
a evessa ry form (s).| 

YES. klimdiy my forms, paper or electronic, used to request such 
mfbrtnatbn from she hifm'm&tm® subject;: 

7, Has the system smdetootse CemBeshon 0 Acereditatton (C&A) by tde FBI. Security Division < SecD)? 

NO. IToo, indicate reason; if C&.A is pending, provide aoBcipoteti completion date; 

.X.Mbs. If yes. provide slate of last ( A \ eottilkadoo/re-rertiiMatEnt: 20/09 

.Dotft Know. 

NO.. X Don't know. \ 1 s [[Its vs, pteaw proOdv shr dan 

and name or title of the 0MB submission; 


9 ft this a netionai secerns 
.X.NO. 


10. Stoats of System/ Project: 

... ' ' S v V V W NvV. \ S V \ 0 V 

El .9 is non complete and alter division appro vails.! sbotsbl be to both ted to FBI 
OOC'/ECLE for littai FBI approval and determination If PIN and/or other actions are 

11. EXISTING SYSTEMS / PROJECTS 

E. N V!. -.S'.-W V ,.v, 

.X.NO. [Into., proceed to next question ; E.3}d 

. VES. If yes., bidicthe which of the toUowmq. ebanaes veto Involved (mark ail boxes that 

apply); 


Dotvt Dios 
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A coatee irons foformatiors in a format rhor Is anonymous or tonbtkmiflabie to a 
format that in Identifiable vo panicoiar individuals. 

A new use of sol IT xwsiemforokct. including application of a tee. technology. that 
chances how iuiort triton hi idhrmliable form is managed, (Tor example. a change 
that would crease a more open environment and/or avenue ibr exposure of dwa that 
previously did ore exist) 

A coatee roar results in tdortunion in foeml table form betst merged, cemrahswh, 
or matched with other dotabaxes. 

A tew method of onrhosaticoting the use of and access to Information in Idemltabte 
fonrs by ores':hew of the naifucf 

A systematic incorporation oi databases of informahoa in identifiable .form 
purchased or obtained hort commercial or public sources. 

.A ceo interagency use or shared agency foachrm that results or new uses or 
exchanges ofuslhbrtabeu it kkatitiafoe tortt. 

.A change that reed's its a ten tec or disclosure of Information in rdewifiabie form, 
uuo tlse systeus/prplcd :. 

Charsets do tot Involve a chance iu foe type of recoivA maintained.:, the Indlvldaak 
nr- whom records are maintained, or the use or dissemination w mformation hum 
the- systtmxwroject, 

ffox^ , mod e\o armumt 


ifonvMe dace/iHle of the FI.At 



EPIC-14-06-04-FBI-FOIA^0150616-7th-Production 


EPIC-2263 










UNCLASSIFIED/FOUO 


(OGC/PCLU (Rev. 01/05/09) 

FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

(equivalent to the DOJ Initial Privacy Assessment (IPA)) 


NAME OF SYSTEM / PROJECT: 


Derived From: Not Applicable 
Classified By: 

Reason: 

Declassify On: 


SYST EM/PROJECT POC 
Name: | | 

Program Office: HUMINT Technical 
Unit (HTU) 

Division: Directorate of Intelligence 

( DI > ___ 

Phone 1 I 

Room Number: 11100 


FBI OGC/PCLU POC 
Name:! 


Room Number: 7338 


b3 

b7E 

b7D 


b6 

b7C 


FBI DIVISION INTERMEDIATE APPROVALS 



Program Manager (or other appropriate 
executive as Division determines) 

Division Privacy Officer 

Program Division: 

Office of IT Program 
Management (OIPM) 

Signature] j 

Signature: 

Date sign edtr'Otf/o $/■&? 

Name: | I 

Date signed: S/Y/EX/ 

Name:| | 

Title: Program Management Executive 

Title: Information Technology (Specialist 

FBIHQ Division: 
Directorate of 
Intelligence (DI) 

Signature: 

Date signed: 57/7 / 

Name: Kevin Favreau 

Title: Assistant Director DI 

Signature: | L 

Date s ened: $7 Wnq _ 

Name: | 

Title: Privacy Officer for the Directorate of 
Intelligence 


Additional division(s) approvals may be added as warranted: 


After all division approvals, forward signed hard copy plus electronic copy to FBI OGC/PCLU (JEH 7338). 

(The FBI Privacy and Civil Liberties Officer's determinations, conditions, and/or final approval will be recorded on the 
following page.) 

Upon final FBI approval, FBI OGC/PCLU will distribute as follows: 

1 - Signed original to file 190-HQ-C1321794 (Iwd to JEH 1B204 via PA-520) 

Copies (recipients please print/reproduce as needed for Program/Division file(s)): 


UNCLASSIFIED/FOUO 


epic.org 


EPIC-14-06-04-FBI-FOIA-20150616-7th-Production 


EPIC-2250 





FBI PTA: | 1 


UNCLASSIFIED/FOUO 


b3 

b7D 

b7E 


1 ’ D ?.'J. < ^ fflCe of Privacy and Civil Liberties (via e-mail to privacv@usdoi.gov') 

(if classified, via hand delivery to 1331 Penn. A ve. NW Suite 940 205301 

2 - FBI OCIO / OIPP (JEH 93 76, attnj ’ 

1 - FBI SecD/AU (ele ctronic copy: via e-m ail to UC I 

1 - RMD/RMAU (attn j | - 

2 - Program Division POC /Privacy Officer 
2 - FBIHQ Division POC /Privacy Officer 


1 - OGCVPCLU intranet 
1 - PCLU UC 
1 - PCLU Libraiy 
1 - PCLU Tickler 
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FBI PTA: □ 


UNCLASSIFIED/FOUO 


FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: __ 

| PIA required: X N o Yes: SORN/SORN revision required: K No _Yes: 

h)0 M- Xt iJ&STSizXf. CL PjuaWuu/ CUitPyacd' 

Applicable SORN(s): fi? A d/JU 'L6^(/ 

Notify FBI RMD/RIDS per MIOG 190.2.3: No _Yes 

/i^ i.crdb fo h/l /Wma^ 

I Prepare/revise/add Privacy Act (e)(3) statements for related forms? _No _Yes-forms affected: 


The program should consult with RMD to identify/resolve any Federal records/electronic records issues. 
Other: 


David C. Larson, Deputy General Counsel 
FBI Privacy and Civil Liberties Officer 




b7D 

b7E 
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___ UN CL ASSIFIED/F OUO 

FBI PTA: □ 

I. INFORMATION ABOUT THE SYSTEM / PROJECT 

1. Provide a general description of the system or project that includes: name of the system/project, 
including associated acronyms; structure of the system/project, purpose; nature of the information 
in the system and how it will be used; who will have access to the information in the system and the 
manner of transmission to al users. 


b3 

b7D 

b7E 


b3 

b7D 

b7E 
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FBI PTA: □ 


UNCLASSIFIED/FOUO 


b3 

b7D 

b7E 


2. Does the system/project collect, maintain, or disseminate any information about individuals in 
identifiable form, i.e., is information linked to or linkable to specific individuals (which is the definition 
of personally identifiable information (PII))? 

_NO. [If no, STOP. The PTA is now complete and after division approval(s) should be 

submitted to FBI OGC/PCLU for final FBI approval. Unless you are otherwise advised, no 
PIA is required.] 

X YES. I _ 


b3 

b7D 

b7E 


3. Does the system/project pertain only to government employees, contractors, or consultants? 

X NO. _YES. 

4. Is information about United States citizens or lawfully admitted permanent resident aliens retrieved 
from the system/project by name or other personal identifier? 

_NO. X YES. 


5. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the system/project? 
_. NO. X YES. If yes, check all that apply: 

X SSNs are necessary to establish/co nf irm the identity of subjects, victims, witnesses 
or sources in this law enforcement or intelligence activity. 

_SSNs are necessary to identify FBI personnel in this internal administrative system. 

_SSNs are important for other reasons. Describe: 

X The system/project provides special protection to SSNs (e.g., SSNs are encrypted, 
hidden from all users via a look-up table, or only available to certain users'). Describe- 


b3 

b7D 

b7E 
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UNCLASSIFIED/FOUO 


b3 

b7D 

b7E 


FBI PTA: □ 


_It is not feasible for the system/project to provide special protection to SSNs. 

Explain: 

6. Does the system/project collect any information directly from the person who is the subject of the 
information? 

_NO. [If no, proceed to question 7.] 

X YES. 


a. Does the system/project support criminal, CT, or FCI investigations or assessments? 
X YES. [If yes, proceed to question 7.] 

NO. 



_NO. [The program will need to work with PCLU to develop/implement the 

necessary form(s).] 

_YES. Identify any forms, paper or electronic, used to request such 

information from the information subject: 
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UN CL ASSIFIED/FOUO 


b3 

b7D 

b7E 


7. Has the system undergone Certification & Accreditation (C&A) by the FBI Security Division (SecD)? 

_ NO. If no, indicate reason; if C&A is pending, provide anticipated completion date: 

X YES. If yes, provide date of last C&A certification/re-certification: May 13,2008 
_Don’t Know. 


8. Is this system/project the subject of an OMB-300 budget submission? 

X NO. _Don't know. _YES. If yes, please provide the date 

and name or title of the OMB submission: 


9. Is this a national security system (as determined by the SecD)? 

_NO. X YES. _Don't know. 

10. Status of S ystem/ Proj ect: 

_ This is a new system/ project in development. [If you checked this block, STOP. The 

PTA is now complete and after division approval(s) should be submitted to FRL_ 
OGC/PCLU for final FBI approval and determination if PIA and/or other actions are 
required .] 


II. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? 

It was first deployed in a limited pilot to six Field Offices on May 14, 2008. 

2. Has the system/project undergone any significant changes since April 17,2003? 

X NO. [If no, proceed to next question (II.3).] 

_ YES. If yes, indicate which of the following changes were involved (mark all boxes that 

apply): 

_ A conversion from paper-based records to an electronic system. 

_ A change from information in a format that is anonymous or non-identifiable to a 

format that is identifiable to particular individuals. 
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